Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/eQopMyhfz9_yowsBkHdwuRFm62k.roa
File: eQopMyhfz9_yowsBkHdwuRFm62k.roa (raw, json)
Hash identifier: vR774g/1XccTMIicZsN4s0VcA1sa4K7pZ/PM/1YcjjY=
Subject key identifier: 79:0A:29:33:28:5F:CF:DF:F2:A3:0B:01:90:77:70:B9:11:66:EB:69
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 01833B45FC3CDAE1487CDCAE189AEE705337
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/eQopMyhfz9_yowsBkHdwuRFm62k.roa
Signing time: Wed 14 Sep 2022 09:13:05 +0000
ROA not before: Wed 14 Sep 2022 09:13:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8312
IP address blocks: 185.213.0.0/24 maxlen: 24
185.213.3.0/24 maxlen: 24
185.213.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3b:45:fc:3c:da:e1:48:7c:dc:ae:18:9a:ee:70:53:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Sep 14 09:13:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=790a2933285fcfdff2a30b01907770b91166eb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2f:7f:a9:eb:f6:b7:58:6b:32:c9:a5:73:bf:
1c:36:4e:0e:25:72:3b:45:53:d4:c8:5d:ab:16:83:
c2:64:a4:11:63:2c:30:47:5e:e4:d3:d1:de:b1:94:
40:1e:e4:aa:cb:be:0d:1b:bb:59:fb:84:6f:71:cb:
b0:66:fd:14:94:dc:e5:11:5b:cb:02:69:ba:af:0e:
ef:d3:56:68:e9:17:0c:45:3b:91:10:20:ce:fc:4b:
ad:19:e2:e2:9b:f9:0e:31:94:c4:35:ec:40:0d:33:
65:d3:76:c6:85:74:67:85:b6:3c:a5:1f:93:f6:04:
8d:e2:fe:be:d0:62:0f:cd:e6:d4:2a:0c:4e:eb:bd:
8d:1f:f6:86:53:c2:18:80:77:93:f8:63:45:30:29:
c0:86:17:02:c4:e0:a1:ce:1d:e9:95:8a:35:28:05:
b7:fc:03:32:4d:3a:5f:98:70:c1:08:a6:f1:1a:0c:
ef:e1:ba:b2:d4:8c:1e:95:29:40:fb:a8:df:91:8d:
97:8a:5b:a9:24:2a:d5:2d:92:36:f4:df:a6:0c:0e:
4d:ca:2d:ed:b5:17:e3:e1:f3:e0:36:80:01:ea:e6:
86:32:f0:b1:bb:8b:38:6d:28:d8:b2:53:df:5f:e3:
e6:4b:80:3a:74:ee:f3:f0:58:d4:66:44:ab:d7:69:
84:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0A:29:33:28:5F:CF:DF:F2:A3:0B:01:90:77:70:B9:11:66:EB:69
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/eQopMyhfz9_yowsBkHdwuRFm62k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.0.0/23
185.213.3.0/24
Signature Algorithm: sha256WithRSAEncryption
82:22:18:68:50:b3:4d:1d:14:c6:d7:76:5f:48:b7:ef:bc:95:
90:7b:01:f6:f1:ea:ea:c1:37:1d:61:77:ee:37:d6:53:71:45:
99:66:ac:4e:77:ac:22:24:5f:4d:d6:30:35:1b:36:8d:eb:55:
5d:04:a0:eb:b1:cc:f9:e3:18:aa:85:4c:fb:a0:fa:0c:a2:0a:
a1:50:eb:3d:f4:fc:94:c2:2f:d7:64:ce:13:8c:5e:31:04:17:
20:45:6a:be:05:67:5a:60:ae:40:e7:19:e2:d3:ee:ed:ca:10:
bc:85:69:fc:95:d9:1f:48:db:77:dc:cc:22:f9:c9:98:d9:ff:
86:41:5c:96:e9:3c:26:f3:4d:06:af:c6:ef:db:5c:f1:04:43:
ec:91:46:4b:6d:09:13:92:11:05:4e:d8:f7:79:22:7a:73:3b:
65:6f:6d:01:74:1b:ca:74:9a:96:db:7e:d9:fc:84:cc:50:b3:
e8:65:27:1f:08:cb:ae:e5:ae:78:3c:cb:43:18:95:75:16:b9:
58:cc:b4:50:69:b9:e3:84:7e:c5:6b:c5:cf:c3:09:00:73:53:
c8:8c:c9:48:82:49:e1:1d:22:55:5f:f7:8f:80:ca:74:61:9a:
f3:0b:c0:37:e0:82:ba:63:20:9d:73:a3:78:9e:4c:2a:40:be:
e7:69:ca:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:40 2023 by rpki-client on console-fra.rpki-client.org